Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
File: NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft (raw, json)
Hash identifier: 701zA8ExzvGnfoPyIQKlF3Jxc0b6/SXnsHc7h4T3q6w=
Subject key identifier: 34:CA:2C:16:15:1A:FA:D2:05:0D:7D:90:4A:6F:FE:50:2D:02:ED:1F
Authority key identifier: 36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
Certificate issuer: /CN=36368aac0f4a28c8a31760f06b578dae453146f0
Certificate serial: 0197469E204A5FE56823142EF40A62BDE531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
Manifest number: 1576
Signing time: Fri 06 Jun 2025 19:00:57 +0000
Manifest this update: Fri 06 Jun 2025 19:00:57 +0000
Manifest next update: Sat 07 Jun 2025 19:00:57 +0000
Files and hashes: 1: NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl (hash: w3KqTvSD5h3rYJNq3z9XIZlj+8N6YneNxtBf7mDpsC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:20:4a:5f:e5:68:23:14:2e:f4:0a:62:bd:e5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36368aac0f4a28c8a31760f06b578dae453146f0
Validity
Not Before: Jun 6 19:00:57 2025 GMT
Not After : Jun 7 19:00:57 2025 GMT
Subject: CN=34ca2c16151afad2050d7d904a6ffe502d02ed1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ed:4c:2f:f9:35:f4:39:14:da:2a:a1:12:bd:
e7:37:ad:04:08:0b:c2:34:5e:f5:5b:e4:99:65:81:
06:08:cd:35:4a:1a:a3:c7:d5:32:62:91:71:cc:2a:
6d:83:2d:cf:45:e2:f2:e6:01:e1:b4:2d:9e:e8:56:
63:1b:68:10:e1:6f:67:68:de:38:71:a0:5c:99:cc:
df:b5:2d:32:87:98:79:4c:32:27:e1:9d:ae:cf:bf:
dc:56:c6:11:f9:f3:78:fa:f5:50:8e:84:6b:62:17:
c3:41:51:95:61:d0:aa:85:c6:bc:78:f4:88:20:44:
7c:b9:26:d2:e3:27:9d:de:f3:ae:22:82:a7:cb:2a:
6c:51:d9:2b:01:95:4c:0c:a7:86:d3:60:ab:e9:83:
bf:e0:83:ca:65:83:58:3b:40:ae:4d:1f:74:d8:1e:
1d:0c:d0:d2:06:be:67:39:0a:e3:cf:56:e8:50:1e:
1e:3d:06:6b:2a:3f:d4:47:c2:91:75:10:ab:3f:d3:
42:ec:b5:de:7f:3c:2f:fd:0c:2e:9c:99:86:ea:98:
66:9e:30:ee:6d:c5:9b:68:21:b1:57:2e:4b:c1:d4:
54:76:e8:40:c2:48:03:c1:70:ef:7a:01:3a:e6:a1:
6e:8c:f6:e2:5d:d2:12:07:0e:e0:44:51:1a:a4:8c:
57:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CA:2C:16:15:1A:FA:D2:05:0D:7D:90:4A:6F:FE:50:2D:02:ED:1F
X509v3 Authority Key Identifier:
keyid:36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:7e:c1:ec:cf:ea:11:41:1a:73:e4:85:21:a5:29:bf:56:6c:
ce:03:b0:4e:2f:79:41:3a:68:60:44:c4:33:08:58:04:53:ea:
46:7f:c1:7b:b5:ab:68:6b:33:91:e7:bb:e3:34:c5:68:8f:71:
c7:c6:95:0e:33:3b:3b:a3:3f:af:ad:0f:17:35:45:3e:b6:e8:
c6:33:01:25:d0:dd:13:cd:50:ae:03:4c:2b:40:b1:b5:b4:1f:
7b:f6:49:39:ea:a7:4e:78:d9:dd:a2:ff:0a:5b:33:cb:d8:cc:
cf:6a:4b:c6:c0:d0:2b:ad:4f:9b:15:1f:a8:41:df:5a:a9:c7:
0b:b4:3f:48:e7:ab:39:24:14:cc:a3:01:9b:1a:f4:47:54:fa:
d7:0b:8a:f8:c0:bf:79:88:fd:02:f4:f3:d9:81:fe:50:43:96:
13:64:3c:8b:72:df:06:10:00:ca:05:54:fa:a9:ae:ba:42:d2:
ed:23:ae:25:2c:22:11:0d:6f:69:ce:75:0b:32:cb:d7:36:32:
31:93:31:1c:17:de:07:d7:d4:c3:ae:6b:69:05:56:ae:b0:58:
c2:68:aa:11:a9:a4:93:50:ae:07:06:cf:c0:15:e8:78:34:86:
e3:d5:6a:e2:e5:cd:01:af:81:cc:0e:27:bc:b9:b2:b2:a3:5d:
0c:99:0a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:06:26 2025 by rpki-client